Local Computer Policy

[mayh3m]

This is a stupid question probably. I changed my local security policies to not allow other people from my work domain to logon to the machine. (My 2000 server is a member server) I then added my domain account to allow it to logon to the machine. I rebooted and when I tried to log on, it would not allow me to logon with my domain account (which is a local administrator) or with the local administrator account. It says that the local policies are not allowing you to log on interactively. I've tried to add that snap in from another 2000 server but I can't seem to find it (local policy) I also can't find that setting under group policy. Is it somewhere else. This sounds pathetic, but I can't seem to think of what to do!! PLease help

 

[dvornik]

I've had this happen to my boss. There's a utility in the Reskit that can change this particular permission remotely... Let me see...

Here, NTRights:

http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q276590&

You can find it on the net if you don't have the Reskit.

 

[dvornik]

Random link from Google - VIRUS SCAN and all of that:

http://lightning.prohosting.com/~woof/temp/ntrights.zip

 

[mayh3m]

Thanks very much. Does this work instantaneously? I did the command and it said it was succesful, but I still can't logon. Does t have to refresh or something. I did power the machine off and on again.

 

[dvornik]

Worked instanteniously for us, we only tried it once. Make sure all your paths are correct and all of that. Maybe someone else here will have an insight on the subject.

 

[mayh3m]

Thanks for all your help. It is working. You have to remove the everyone group. I was only removing my user. Do you think this is possible a bug in 2000 as I only dissallowed the everyone group under my domain. Surely the local user should still be able to logon.

Thanks again

 

[dvornik]

I was about to suggest it (considering groups). The article says it's by design. Strange design if you ask me.